b316bd561c2494c249877e73572ff730_NeikiAnalytics | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b316bd561c2494c249877e73572ff730_NeikiAnalytics
Size

92KB
MD5

b316bd561c2494c249877e73572ff730
SHA1

e82382003ed2554ea27b1d3226ae218d80736144
SHA256

4d0a22037d3da32e20055282a45ed3697001798351917d3fe16b3302947a767d
SHA512

b282872b48ef97a2c3e03207e8c2aeb99b71598298364ed5b4d96a62b713bd6f9107260bde07a424093f7c2b1e3c4da84e1a82db39adc779a06c754c4888a001
SSDEEP

1536:EY9HcVG8RELvrdYpBgqz3uynOo3nyjMHMHlXIFv69T8YgP7ja4G0:EEcVd6LCpB/PtuGMHRrVgP7+z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b316bd561c2494c249877e73572ff730_NeikiAnalytics

Files

b316bd561c2494c249877e73572ff730_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

e8b4c7662649cb440afca8c5b4f97417

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__getmainargs
_adjust_fdiv
__p__commode
__p__fmode
_initterm
__setusermatherr
_controlfp
__p___initenv
_XcptFilter
_exit
tolower
malloc
free
strncpy
printf
exit
strstr
__set_app_type
_except_handler3
_stricmp

kernel32

_lopen
_llseek
_lclose
_lread
_lcreat
_lwrite
MoveFileExA
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE